5

CVE-2009-1341

Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.

Data is provided by the National Vulnerability Database (NVD)
DebianLibdbd-pg-perl Version <= 1.4.9
DebianLibdbd-pg-perl Version0.1
DebianLibdbd-pg-perl Version0.2
DebianLibdbd-pg-perl Version0.3
DebianLibdbd-pg-perl Version0.4
DebianLibdbd-pg-perl Version0.5
DebianLibdbd-pg-perl Version0.51
DebianLibdbd-pg-perl Version0.52
DebianLibdbd-pg-perl Version0.61
DebianLibdbd-pg-perl Version0.62
DebianLibdbd-pg-perl Version0.63
DebianLibdbd-pg-perl Version0.64
DebianLibdbd-pg-perl Version0.65
DebianLibdbd-pg-perl Version0.66
DebianLibdbd-pg-perl Version0.67
DebianLibdbd-pg-perl Version0.68
DebianLibdbd-pg-perl Version0.69
DebianLibdbd-pg-perl Version0.70
DebianLibdbd-pg-perl Version0.71
DebianLibdbd-pg-perl Version0.72
DebianLibdbd-pg-perl Version0.73
DebianLibdbd-pg-perl Version0.80
DebianLibdbd-pg-perl Version0.81
DebianLibdbd-pg-perl Version0.82
DebianLibdbd-pg-perl Version0.83
DebianLibdbd-pg-perl Version0.84
DebianLibdbd-pg-perl Version0.85
DebianLibdbd-pg-perl Version0.86
DebianLibdbd-pg-perl Version0.87
DebianLibdbd-pg-perl Version0.88
DebianLibdbd-pg-perl Version0.89
DebianLibdbd-pg-perl Version0.90
DebianLibdbd-pg-perl Version0.91
DebianLibdbd-pg-perl Version0.92
DebianLibdbd-pg-perl Version0.93
DebianLibdbd-pg-perl Version0.94
DebianLibdbd-pg-perl Version0.95
DebianLibdbd-pg-perl Version0.96
DebianLibdbd-pg-perl Version0.97
DebianLibdbd-pg-perl Version0.98
DebianLibdbd-pg-perl Version0.99
DebianLibdbd-pg-perl Version1.0.0
DebianLibdbd-pg-perl Version1.0.1
DebianLibdbd-pg-perl Version1.2.0
DebianLibdbd-pg-perl Version1.2.1
DebianLibdbd-pg-perl Version1.2.2
DebianLibdbd-pg-perl Version1.3.1
DebianLibdbd-pg-perl Version1.3.2
DebianLibdbd-pg-perl Version1.4.0
DebianLibdbd-pg-perl Version1.4.1
DebianLibdbd-pg-perl Version1.4.2
DebianLibdbd-pg-perl Version1.4.3
DebianLibdbd-pg-perl Version1.4.4
DebianLibdbd-pg-perl Version1.4.5
DebianLibdbd-pg-perl Version1.4.6
DebianLibdbd-pg-perl Version1.4.7
DebianLibdbd-pg-perl Version1.4.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.47% 0.901
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.